{"@context":"https://schema.org","@type":"NewsArticle","generatedAt":"2026-07-23T06:40:50.084Z","headline":"xAI 官方 Grok CLI 被曝静默上传整个代码库及用户密钥","description":"安全研究者发现，xAI 官方 Grok CLI（npm 包 `@xai-official/grok` 0.2.93 版）会在每轮任务前后，将当前工作目录打包为 `before_codebase.tar.gz` 和 `after_codebase.tar.gz`，通过独立旁路通道静默上传至 xAI 的 Google Cloud 仓库。验证显示，即使模型仅回复一个单词，上传依然发生。上传包还包含仓库外的 `~/.claude.json`、Claude Code 设置、全局 AGENTS 规则、30 多个 Skill 文件及一个 API 密钥。7 月 13 日凌晨，xAI 通过服务端远程开关新增 `disable_codebase_upload` 字段，将默认上传行为关闭，但此前该功能默认开启。","url":"https://www.aioga.com/news/cmriguktg00arbijpt0l7c2vh/","mainEntityOfPage":"https://www.aioga.com/news/cmriguktg00arbijpt0l7c2vh/","datePublished":"2026-07-13T00:05:00.000Z","dateModified":"2026-07-13T00:05:00.000Z","inLanguage":"zh-CN","publisher":{"@type":"NewsMediaOrganization","name":"Aioga","url":"https://www.aioga.com"},"citation":["https://mp.weixin.qq.com/s/6c6vGMJAVMbh6UhNVw4dcg","https://aihot.virxact.com/items/cmriguktg00arbijpt0l7c2vh"],"canonicalUrl":"https://www.aioga.com/news/cmriguktg00arbijpt0l7c2vh/","directAnswer":{"@type":"Answer","text":"公开材料称，xAI 官方 Grok CLI 的 0.2.93 版会在每轮任务前后打包并上传当前工作目录，且上传内容被发现包含仓库外配置、Skill 文件和一个 API 密钥；材料同时称，xAI 已通过服务端开关默认关闭该行为。","url":"https://www.aioga.com/news/cmriguktg00arbijpt0l7c2vh/","dateCreated":"2026-07-13T00:05:00.000Z","author":{"@type":"Organization","@id":"https://www.aioga.com/authors/aioga-editorial/#editorial-team","name":"Aioga Editorial Team","url":"https://www.aioga.com/authors/aioga-editorial/"}},"evidence":[{"@type":"CreativeWork","name":"公众号：数字生命卡兹克 source article","url":"https://mp.weixin.qq.com/s/6c6vGMJAVMbh6UhNVw4dcg","datePublished":"2026-07-13T00:05:00.000Z","provider":{"@type":"Organization","name":"公众号：数字生命卡兹克","url":"https://mp.weixin.qq.com/s/6c6vGMJAVMbh6UhNVw4dcg"}},{"@type":"CreativeWork","name":"AIHot archive record","url":"https://aihot.virxact.com/items/cmriguktg00arbijpt0l7c2vh","datePublished":"2026-07-13T00:05:00.000Z","provider":{"@type":"Organization","name":"AIHot","url":"https://aihot.virxact.com/items/cmriguktg00arbijpt0l7c2vh"}}],"aggregationSource":"公众号：数字生命卡兹克","originalPublisher":{"name":"公众号：数字生命卡兹克","url":"https://mp.weixin.qq.com/s/6c6vGMJAVMbh6UhNVw4dcg"},"article":{"id":"cmriguktg00arbijpt0l7c2vh","slug":"cmriguktg00arbijpt0l7c2vh","url":"https://www.aioga.com/news/cmriguktg00arbijpt0l7c2vh/","title":"xAI 官方 Grok CLI 被曝静默上传整个代码库及用户密钥","title_en":"我只让Grok回复一个单词，它就把我整个代码库都偷走了。","summary":"安全研究者发现，xAI 官方 Grok CLI（npm 包 `@xai-official/grok` 0.2.93 版）会在每轮任务前后，将当前工作目录打包为 `before_codebase.tar.gz` 和 `after_codebase.tar.gz`，通过独立旁路通道静默上传至 xAI 的 Google Cloud 仓库。验证显示，即使模型仅回复一个单词，上传依然发生。上传包还包含仓库外的 `~/.claude.json`、Claude Code 设置、全局 AGENTS 规则、30 多个 Skill 文件及一个 API 密钥。7 月 13 日凌晨，xAI 通过服务端远程开关新增 `disable_codebase_upload` 字段，将默认上传行为关闭，但此前该功能默认开启。","source":"公众号：数字生命卡兹克","sourceUrl":"https://mp.weixin.qq.com/s/6c6vGMJAVMbh6UhNVw4dcg","aiHotUrl":"https://aihot.virxact.com/items/cmriguktg00arbijpt0l7c2vh","publishedAt":"2026-07-13T00:05:00.000Z","category":"行业动态","score":86,"selected":true,"articleBody":["安全研究者发现，xAI 官方 Grok CLI（npm 包 `@xai-official/grok` 0.2.93 版）会在每轮任务前后，将当前工作目录打包为","`before_codebase.tar.gz` 和 `after_codebase.tar.gz`，通过独立旁路通道静默上传至 xAI 的 Google Cloud 仓库。","验证显示，即使模型仅回复一个单词，上传依然发生。","上传包还包含仓库外的 `~/.claude.json`、Claude Code 设置、全局 AGENTS 规则、30 多个 Skill 文件及一个 API 密钥。","7 月 13 日凌晨，xAI 通过服务端远程开关新增 `disable_codebase_upload` 字段，将默认上传行为关闭，但此前该功能默认开启。"],"articleImages":[],"mediaStatus":"none","articleBodyZh":[],"translationStatus":"","bodyOrigin":"summary-fallback","editorial":{"summary":"公开材料称，xAI 官方 Grok CLI 的 0.2.93 版会在每轮任务前后打包并上传当前工作目录，且上传内容被发现包含仓库外配置、Skill 文件和一个 API 密钥；材料同时称，xAI 已通过服务端开关默认关闭该行为。","background":"材料称，相关 npm 包会生成 before_codebase.tar.gz 与 after_codebase.tar.gz，并通过独立旁路通道上传至 xAI 的 Google Cloud 仓库；验证中，即使模型仅回复一个单词，上传仍会发生。","viewpoint":"Aioga 判断，值得关注的核心并非模型回复内容，而是工具是否在用户充分知情和授权的情况下收集任务所需范围之外的数据。当前材料来自单一公众号，相关技术结论仍需结合官方说明或更多独立验证审视。","implications":"该行为可能使代码、开发工具配置、全局规则及密钥进入外部存储范围，增加企业代码治理与凭证管理压力。默认上传后来被关闭，也值得关注此前版本的使用者是否需要检查本地配置和密钥暴露情况。","nextStep":"建议相关用户核对所安装的包版本与服务端配置，检查工作目录及被提及的仓库外文件中是否存在敏感信息，并按组织安全流程评估是否轮换相关密钥；同时等待 xAI 对数据范围、保留方式和处置措施作出说明。","evidenceRefs":["title","summary","articleBody","source"],"status":"published","aiGenerated":true,"autoApproved":true,"generatedBy":"aioga-editorial:gpt-5.6-sol","reviewedBy":"aioga-editorial-review:gpt-5.6-sol","generatedAt":"2026-07-22T16:53:42.879Z","sourceHash":"6061a7ffdd2ce6a5","review":{"approved":true,"groundedness":96,"clarity":94,"duplicationRisk":18,"blockingIssues":[],"notes":["候选内容对单一来源的局限作了明确提示，并使用“材料称”“可能”“建议”等限定语区分来源事实、风险判断与行动建议。","可选优化：可在“已通过服务端开关默认关闭”处补充来源所述的“7月13日凌晨”，但缺少该时间不影响事实准确性。"]},"validation":{"passed":true,"mode":"ai-auto","revisions":0,"checks":["schema","length","source-attribution","low-source-overlap","no-html","independent-ai-review"]}},"tags":["行业动态","公众号：数字生命卡兹克"],"translations":{"zh-CN":{"title":"xAI 官方 Grok CLI 被曝静默上传整个代码库及用户密钥","summary":"安全研究者发现，xAI 官方 Grok CLI（npm 包 `@xai-official/grok` 0.2.93 版）会在每轮任务前后，将当前工作目录打包为 `before_codebase.tar.gz` 和 `after_codebase.tar.gz`，通过独立旁路通道静默上传至 xAI 的 Google Cloud 仓库。验证显示，即使模型仅回复一个单词，上传依然发生。上传包还包含仓库外的 `~/.claude.json`、Claude Code 设置、全局 AGENTS 规则、30 多个 Skill 文件及一个 API 密钥。7 月 13 日凌晨，xAI 通过服务端远程开关新增 `disable_codebase_upload` 字段，将默认上传行为关闭，但此前该功能默认开启。","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"xAI 官方 Grok CLI 被曝静默上传整个代码库及用户密钥 - Aioga AI资讯","description":"安全研究者发现，xAI 官方 Grok CLI（npm 包 `@xai-official/grok` 0.2.93 版）会在每轮任务前后，将当前工作目录打包为 `before_codebase.tar.gz` 和 `after_codebase.tar.gz`，通过独立旁路通道静默上传至 xAI 的 Google Cloud 仓库。验证显示，即使模型仅回复一","url":"https://www.aioga.com/news/cmriguktg00arbijpt0l7c2vh/"},"en":{"title":"xAI's official Grok CLI was reported to have silently uploaded the entire codebase and user keys","summary":"Security researchers have found that xAI's official Grok CLI (npm package '@xai-official/grok' version 0.2.93) packages the current work directory into 'before_codebase.tar.gz' and 'after_codebase.tar.gz' before and after each round of tasks, and silently uploads them to xAI's Google Cloud repository via a separate bypass channel. Verification shows that even if the model replies with just one word, the upload still occurs. The upload package also contains '~/.claude.json' outside the repository, Claude Code settings, global AGENTS rules, over 30 Skill files, and an API key. In the early hours of July 13, xAI added a 'disable_codebase_upload' field via remote server switch, turning off the default upload behavior, but previously this feature was enabled by default.","category":"Industry","source":"公众号：数字生命卡兹克","pageTitle":"xAI's official Grok CLI was reported to have silently uploaded the entire codebase and user keys - Aioga AI News","description":"Security researchers have found that xAI's official Grok CLI (npm package '@xai-official/grok' version 0.2.93) packages the current work directory into 'before_codebase.tar.gz' and","url":"https://www.aioga.com/en/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:50:58.971Z"},"ja":{"title":"xAIの公式Grok CLIは、コードベースとユーザーキー全体を静かにアップロードしたと報告されています","summary":"セキュリティ研究者によると、xAIの公式Grok CLI(npmパッケージ『@xai-official/grok』バージョン0.2.93)は、現在の作業ディレクトリを各タスクの前後で「before_codebase.tar.gz」と「after_codebase.tar.gz」にパッケージ化し、別のバイパスチャネルを通じて静かにxAIのGoogle Cloudリポジトリにアップロードしていることを発見しました。 検証の結果、モデルがたった一語で返信してもアップロードは完了します。 アップロードパッケージにはリポジトリ外の「~/.claude.json」、Claude Code設定、グローバルAGENTSルール、30以上のスキルファイル、APIキーも含まれています。 7月13日未明、xAIはリモートサーバースイッチを通じて「disable_codebase_upload」フィールドを追加し、デフォルトのアップロード動作をオフにしましたが、以前はこの機能がデフォルトで有効になっていました。","category":"業界動向","source":"公众号：数字生命卡兹克","pageTitle":"xAIの公式Grok CLIは、コードベースとユーザーキー全体を静かにアップロードしたと報告されています - Aioga AIニュース","description":"セキュリティ研究者によると、xAIの公式Grok CLI(npmパッケージ『@xai-official/grok』バージョン0.2.93)は、現在の作業ディレクトリを各タスクの前後で「before_codebase.tar.gz」と「after_codebase.tar.gz」にパッケージ化し、別のバイパスチャネルを通じて静かにxAIのGoogle Clou","url":"https://www.aioga.com/ja/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:50:59.778Z"},"ko":{"title":"xAI의 공식 Grok CLI는 전체 코드베이스와 사용자 키를 조용히 업로드한 것으로 알려졌습니다","summary":"보안 연구자들은 xAI의 공식 Grok CLI(npm 패키지 '@xai-official/grok' 버전 0.2.93)가 현재 작업 디렉터리를 각 작업 라운드 전후에 'before_codebase.tar.gz'와 'after_codebase.tar.gz'로 패키징하고, 별도의 우회 채널을 통해 조용히 xAI의 구글 클라우드 저장소에 업로드한다는 사실을 발견했습니다. 검증 결과, 모델이 단 한 단어로 답장을 해도 업로드는 여전히 이루어진다는 것을 알 수 있습니다. 업로드 패키지에는 저장소 외부의 '~/.claude.json', Claude Code 설정, 전역 AGENTS 규칙, 30개 이상의 스킬 파일, API 키도 포함되어 있습니다. 7월 13일 이른 새벽, xAI는 원격 서버 스위치를 통해 'disable_codebase_upload' 필드를 추가해 기본 업로드 동작을 끄고 있었지만, 이전에는 이 기능이 기본적으로 활성화되어 있었습니다.","category":"업계 동향","source":"公众号：数字生命卡兹克","pageTitle":"xAI의 공식 Grok CLI는 전체 코드베이스와 사용자 키를 조용히 업로드한 것으로 알려졌습니다 - Aioga AI 뉴스","description":"보안 연구자들은 xAI의 공식 Grok CLI(npm 패키지 '@xai-official/grok' 버전 0.2.93)가 현재 작업 디렉터리를 각 작업 라운드 전후에 'before_codebase.tar.gz'와 'after_codebase.tar.gz'로 패키징하고, 별도의 우회 채널을 통해 조용히 xAI의 구글 클라우드","url":"https://www.aioga.com/ko/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:50:59.297Z"},"es":{"title":"Se informó que la CLI oficial de Grok de xAI había subido silenciosamente toda la base de código y las claves de usuario","summary":"Investigadores de seguridad han descubierto que la CLI oficial de Grok de xAI (paquete npm '@xai-oficial/grok' versión 0.2.93) empaqueta el directorio de trabajo actual en 'before_codebase.tar.gz' y 'after_codebase.tar.gz' antes y después de cada ronda de tareas, y los sube silenciosamente al repositorio de Google Cloud de xAI a través de un canal de bypass separado. La verificación muestra que, incluso si el modelo responde con una sola palabra, la subida sigue ocurriendo. El paquete de subida también contiene '~/.claude.json' fuera del repositorio, ajustes de código Claude, reglas globales de AGENTS, más de 30 archivos Skill y una clave API. En las primeras horas del 13 de julio, xAI añadió un campo 'disable_codebase_upload' mediante un interruptor remoto de servidor, desactivando el comportamiento predeterminado de subida, pero anteriormente esta función estaba activada por defecto.","category":"Industria","source":"公众号：数字生命卡兹克","pageTitle":"Se informó que la CLI oficial de Grok de xAI había subido silenciosamente toda la base de código y las claves de usuario - Aioga Noticias de IA","description":"Investigadores de seguridad han descubierto que la CLI oficial de Grok de xAI (paquete npm '@xai-oficial/grok' versión 0.2.93) empaqueta el directorio de trabajo actual en 'before_","url":"https://www.aioga.com/es/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:50:59.484Z"},"fr":{"title":"La CLI officielle de Grok de xAI aurait téléchargé silencieusement toute la base de code et les clés utilisateur","summary":"Les chercheurs en sécurité ont découvert que la CLI officielle Grok de xAI (paquet npm '@xai-official/grok' version 0.2.93) empaquete le répertoire de travail actuel en 'before_codebase.tar.gz' et 'after_codebase.tar.gz' avant et après chaque cycle de tâches, et les téléverse silencieusement dans le dépôt Google Cloud de xAI via un canal de contournement séparé. La vérification montre que même si le modèle répond par un seul mot, le téléchargement se produit quand même. Le package de téléchargement contient également '~/.claude.json' en dehors du dépôt, les paramètres de code Claude, des règles AGENTS globales, plus de 30 fichiers Skill et une clé API. Aux premières heures du 13 juillet, xAI a ajouté un champ « disable_codebase_upload » via un commutateur de serveur à distance, désactivant ainsi le comportement de téléversement par défaut, mais auparavant cette fonctionnalité était activée par défaut.","category":"Industrie","source":"公众号：数字生命卡兹克","pageTitle":"La CLI officielle de Grok de xAI aurait téléchargé silencieusement toute la base de code et les clés utilisateur - Aioga Actualités IA","description":"Les chercheurs en sécurité ont découvert que la CLI officielle Grok de xAI (paquet npm '@xai-official/grok' version 0.2.93) empaquete le répertoire de travail actuel en 'before_cod","url":"https://www.aioga.com/fr/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:50:59.448Z"},"de":{"title":"Es wurde berichtet, dass die offizielle Grok-CLI von xAI den gesamten Code und die Benutzerschlüssel stillschweigend hochgeladen hat","summary":"Sicherheitsforscher haben herausgefunden, dass xAIs offizielles Grok CLI (npm-Paket '@xai-official/grok' Version 0.2.93) das aktuelle Arbeitsverzeichnis vor und nach jeder Runde in 'before_codebase.tar.gz' und 'after_codebase.tar.gz' verpackt und diese lautlos über einen separaten Bypass-Kanal in xAIs Google Cloud Repository hochlädt. Die Verifizierung zeigt, dass selbst wenn das Modell nur mit einem Wort antwortet, der Upload trotzdem stattfindet. Das Upload-Paket enthält außerdem '~/.claude.json' außerhalb des Repositorys, Claude Code-Einstellungen, globale AGENTS-Regeln, über 30 Skill-Dateien und einen API-Schlüssel. In den frühen Morgenstunden des 13. Juli fügte xAI ein 'disable_codebase_upload'-Feld über den entfernten Server-Switch hinzu und schaltete das Standard-Upload-Verhalten aus, doch zuvor war diese Funktion standardmäßig aktiviert.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"Es wurde berichtet, dass die offizielle Grok-CLI von xAI den gesamten Code und die Benutzerschlüssel stillschweigend hochgeladen hat - Aioga KI-News","description":"Sicherheitsforscher haben herausgefunden, dass xAIs offizielles Grok CLI (npm-Paket '@xai-official/grok' Version 0.2.93) das aktuelle Arbeitsverzeichnis vor und nach jeder Runde in","url":"https://www.aioga.com/de/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:02.772Z"},"pt-BR":{"title":"A CLI oficial do Grok da xAI foi relatada como tendo enviado silenciosamente toda a base de código e as chaves de usuário","summary":"Pesquisadores de segurança descobriram que a CLI oficial Grok da xAI (pacote npm '@xai-official/grok' versão 0.2.93) empacota o diretório de trabalho atual em 'before_codebase.tar.gz' e 'after_codebase.tar.gz' antes e depois de cada rodada de tarefas, e os envia silenciosamente para o repositório Google Cloud da xAI via um canal separado de bypass. A verificação mostra que, mesmo que o modelo responda com apenas uma palavra, o upload ainda ocorre. O pacote de upload também contém '~/.claude.json' fora do repositório, configurações do Claude Code, regras globais de AGENTS, mais de 30 arquivos Skill e uma chave API. Nas primeiras horas de 13 de julho, a xAI adicionou um campo 'disable_codebase_upload' via switch remoto de servidor, desativando o comportamento padrão de upload, mas anteriormente esse recurso era ativado por padrão.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"A CLI oficial do Grok da xAI foi relatada como tendo enviado silenciosamente toda a base de código e as chaves de usuário - Aioga Notícias de IA","description":"Pesquisadores de segurança descobriram que a CLI oficial Grok da xAI (pacote npm '@xai-official/grok' versão 0.2.93) empacota o diretório de trabalho atual em 'before_codebase.tar.","url":"https://www.aioga.com/pt-BR/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:04.065Z"},"ru":{"title":"Официальный CLI Grok от xAI, по сообщениям, молча загрузил всю кодовую базу и пользовательские ключи","summary":"Исследователи в области безопасности обнаружили, что официальный Grok CLI xAI (npm пакет '@xai-official/grok' версии 0.2.93) упаковывает текущий рабочий каталог в 'before_codebase.tar.gz' и 'after_codebase.tar.gz' до и после каждого этапа задач и тихо загружает их в репозиторий Google Cloud xAI через отдельный канал обхода. Проверка показывает, что даже если модель отвечает одним словом, загрузка всё равно происходит. Пакет загрузки также содержит '~/.claude.json' вне репозитория, настройки Claude Code, глобальные правила AGENTS, более 30 файлов Skill и ключ API. Ранним утром 13 июля xAI добавил поле 'disable_codebase_upload' через удалённый коммутатор сервера, отключив стандартное поведение при загрузке, но ранее эта функция была включена по умолчанию.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"Официальный CLI Grok от xAI, по сообщениям, молча загрузил всю кодовую базу и пользовательские ключи - Aioga Новости ИИ","description":"Исследователи в области безопасности обнаружили, что официальный Grok CLI xAI (npm пакет '@xai-official/grok' версии 0.2.93) упаковывает текущий рабочий каталог в 'before_codebase.","url":"https://www.aioga.com/ru/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:04.078Z"},"ar":{"title":"تم الإبلاغ عن أن أداة التحكم الرسمية ل xAI Grok CLI قامت برفع قاعدة الشيفرة الكاملة ومفاتيح المستخدم بصمت","summary":"وجد باحثو الأمن أن ملف xAI الرسمي Grok CLI (حزمة npm '@xai-offal/grok' الإصدار 0.2.93) يقوم بتغليف دليل العمل الحالي إلى 'before_codebase.tar.gz' و'after_codebase.tar.gz' قبل وبعد كل جولة من المهام، ويرفعها بصمت إلى مستودع xAI Google Cloud عبر قناة تجاوز منفصلة. يظهر التحقق أنه حتى لو رد النموذج بكلمة واحدة فقط، فإن الرفع لا يزال يحدث. تحتوي حزمة الرفع أيضا على '~/.claude.json' خارج المستودع، وإعدادات كود كلود، وقواعد AGENTS العالمية، وأكثر من 30 ملف مهارات، ومفتاح API. في الساعات الأولى من 13 يوليو، أضافت xAI حقل 'disable_codebase_upload' عبر تبديل الخادم البعيد، مما أوقف سلوك الرفع الافتراضي، لكن سابقا كانت هذه الميزة مفعلة افتراضيا.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"تم الإبلاغ عن أن أداة التحكم الرسمية ل xAI Grok CLI قامت برفع قاعدة الشيفرة الكاملة ومفاتيح المستخدم بصمت - Aioga أخبار الذكاء الاصطناعي","description":"وجد باحثو الأمن أن ملف xAI الرسمي Grok CLI (حزمة npm '@xai-offal/grok' الإصدار 0.2.93) يقوم بتغليف دليل العمل الحالي إلى 'before_codebase.tar.gz' و'after_codebase.tar.gz' قبل وبعد ","url":"https://www.aioga.com/ar/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:03.789Z"},"hi":{"title":"xAI के आधिकारिक Grok CLI को चुपचाप संपूर्ण कोडबेस और उपयोगकर्ता कुंजियों को अपलोड करने की सूचना मिली थी","summary":"सुरक्षा शोधकर्ताओं ने पाया है कि xAI का आधिकारिक ग्रोक सीएलआई (एनपीएम पैकेज '@xai-आधिकारिक/ग्रोक' संस्करण 0.2.93) कार्यों के प्रत्येक दौर से पहले और बाद में वर्तमान कार्य निर्देशिका को 'before_codebase.tar.gz' और 'after_codebase.tar.gz' में पैक करता है, और चुपचाप उन्हें एक अलग बाईपास चैनल के माध्यम से xAI के Google क्लाउड रिपॉजिटरी में अपलोड करता है। सत्यापन से पता चलता है कि भले ही मॉडल केवल एक शब्द के साथ उत्तर देता है, फिर भी अपलोड होता है। अपलोड पैकेज में रिपॉजिटरी के बाहर '~/.claude.json' भी शामिल है, क्लाउड कोड सेटिंग्स, वैश्विक एजेंट नियम, 30 से अधिक कौशल फ़ाइलें और एक एपीआई कुंजी भी शामिल है। 13 जुलाई के शुरुआती घंटों में, xAI ने रिमोट सर्वर स्विच के माध्यम से एक 'disable_codebase_upload' फ़ील्ड जोड़ा, डिफ़ॉल्ट अपलोड व्यवहार को बंद कर दिया, लेकिन पहले यह सुविधा डिफ़ॉल्ट रूप से सक्षम थी।","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"xAI के आधिकारिक Grok CLI को चुपचाप संपूर्ण कोडबेस और उपयोगकर्ता कुंजियों को अपलोड करने की सूचना मिली थी - Aioga AI समाचार","description":"सुरक्षा शोधकर्ताओं ने पाया है कि xAI का आधिकारिक ग्रोक सीएलआई (एनपीएम पैकेज '@xai-आधिकारिक/ग्रोक' संस्करण 0.2.93) कार्यों के प्रत्येक दौर से पहले और बाद में वर्तमान कार्य निर्देशिक","url":"https://www.aioga.com/hi/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:03.996Z"},"it":{"title":"La CLI ufficiale di Grok di xAI è stata segnalata come caricata silenziosamente l'intera base di codice e le chiavi utente","summary":"I ricercatori di sicurezza hanno scoperto che la CLI ufficiale Grok di xAI (pacchetto npm '@xai-official/grok' versione 0.2.93) impacchettiglia la directory di lavoro corrente in 'before_codebase.tar.gz' e 'after_codebase.tar.gz' prima e dopo ogni ciclo di attività, caricandole silenziosamente nel repository Google Cloud di xAI tramite un canale separato di bypass. La verifica mostra che anche se il modello risponde con una sola parola, il caricamento avviene comunque. Il pacchetto di upload contiene anche '~/.claude.json' al di fuori del repository, impostazioni del codice Claude, regole AGENTS globali, oltre 30 file Skill e una chiave API. Nelle prime ore del 13 luglio, xAI ha aggiunto un campo 'disable_codebase_upload' tramite l'interruttore server remoto, disattivando il comportamento di caricamento predefinito, ma in precedenza questa funzione era abilitata di default.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"La CLI ufficiale di Grok di xAI è stata segnalata come caricata silenziosamente l'intera base di codice e le chiavi utente - Aioga Notizie IA","description":"I ricercatori di sicurezza hanno scoperto che la CLI ufficiale Grok di xAI (pacchetto npm '@xai-official/grok' versione 0.2.93) impacchettiglia la directory di lavoro corrente in '","url":"https://www.aioga.com/it/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:04.591Z"},"nl":{"title":"Van xAI werd gemeld dat de officiële Grok CLI van xAI stilletjes de volledige codebase en gebruikerssleutels had geüpload","summary":"Beveiligingsonderzoekers hebben ontdekt dat xAI's officiële Grok CLI (npm-pakket '@xai-official/grok' versie 0.2.93) de huidige werkmap voor en na elke takenronde verpakt in 'before_codebase.tar.gz' en 'after_codebase.tar.gz', en deze stilletjes uploadt naar xAI's Google Cloud-repository via een apart bypasskanaal. Verificatie toont aan dat zelfs als het model met slechts één woord antwoordt, de upload nog steeds plaatsvindt. Het uploadpakket bevat ook '~/.claude.json' buiten de repository, Claude Code-instellingen, globale AGENTS-regels, meer dan 30 Skill-bestanden en een API-sleutel. In de vroege uren van 13 juli voegde xAI een 'disable_codebase_upload'-veld toe via een externe serverschakelaar, waarbij het standaard uploadgedrag werd uitgeschakeld, maar voorheen stond deze functie standaard in.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"Van xAI werd gemeld dat de officiële Grok CLI van xAI stilletjes de volledige codebase en gebruikerssleutels had geüpload - Aioga AI-nieuws","description":"Beveiligingsonderzoekers hebben ontdekt dat xAI's officiële Grok CLI (npm-pakket '@xai-official/grok' versie 0.2.93) de huidige werkmap voor en na elke takenronde verpakt in 'befor","url":"https://www.aioga.com/nl/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:02.810Z"},"tr":{"title":"xAI'nin resmi Grok CLI'sının tüm kod tabanını ve kullanıcı anahtarlarını sessizce yüklediği bildirildi","summary":"Güvenlik araştırmacıları, xAI'nin resmi Grok CLI'sinin (npm paketi '@xai-official/grok' sürüm 0.2.93) mevcut çalışma dizinini her görev turundan önce ve sonra 'before_codebase.tar.gz' ve 'after_codebase.tar.gz' olarak paketlediğini ve bunları ayrı bir bypass kanalı aracılığıyla xAI'nin Google Cloud deposuna sessizce yüklediğini bulmuştur. Doğrulama, model sadece bir kelimeyle yanıt verse bile yüklemenin gerçekleştiğini gösteriyor. Yükleme paketi ayrıca depo dışındaki '~/.claude.json', Claude Code ayarları, küresel AGENT kuralları, 30'dan fazla Skill dosyası ve bir API anahtarı içerir. 13 Temmuz sabahının erken saatlerinde, xAI uzak sunucu anahtarı aracılığıyla bir 'disable_codebase_upload' alanı ekledi ve varsayılan yükleme davranışını kapattı, ancak daha önce bu özellik varsayılan olarak etkinleştirilmişti.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"xAI'nin resmi Grok CLI'sının tüm kod tabanını ve kullanıcı anahtarlarını sessizce yüklediği bildirildi - Aioga AI Haberleri","description":"Güvenlik araştırmacıları, xAI'nin resmi Grok CLI'sinin (npm paketi '@xai-official/grok' sürüm 0.2.93) mevcut çalışma dizinini her görev turundan önce ve sonra 'before_codebase.tar.","url":"https://www.aioga.com/tr/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:03.007Z"},"vi":{"title":"Grok CLI chính thức của xAI được báo cáo là đã âm thầm tải lên toàn bộ cơ sở mã và khóa người dùng","summary":"Các nhà nghiên cứu bảo mật đã phát hiện ra rằng Grok CLI chính thức của xAI (gói npm '@xai-official/grok' phiên bản 0.2.93) đóng gói thư mục công việc hiện tại thành 'before_codebase.tar.gz' và 'after_codebase.tar.gz' trước và sau mỗi vòng tác vụ, đồng thời âm thầm tải chúng lên kho lưu trữ Google Cloud của xAI thông qua một kênh bỏ qua riêng biệt. Quá trình xác minh cho thấy ngay cả khi mô hình trả lời chỉ bằng một từ, quá trình tải lên vẫn xảy ra. Gói tải lên cũng chứa '~/.claude.json' bên ngoài kho lưu trữ, cài đặt Claude Code, quy tắc AGENTS toàn cầu, hơn 30 tệp Kỹ năng và khóa API. Vào đầu giờ 13/7, xAI đã thêm trường 'disable_codebase_upload' thông qua công tắc máy chủ từ xa, tắt hành vi tải lên mặc định, nhưng trước đây tính năng này được bật theo mặc định.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"Grok CLI chính thức của xAI được báo cáo là đã âm thầm tải lên toàn bộ cơ sở mã và khóa người dùng - Tin tức AI Aioga","description":"Các nhà nghiên cứu bảo mật đã phát hiện ra rằng Grok CLI chính thức của xAI (gói npm '@xai-official/grok' phiên bản 0.2.93) đóng gói thư mục công việc hiện tại thành 'before_codeba","url":"https://www.aioga.com/vi/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:02.668Z"},"id":{"title":"Grok CLI resmi xAI dilaporkan diam-diam mengunggah seluruh basis kode dan kunci pengguna","summary":"Peneliti keamanan telah menemukan bahwa Grok CLI resmi xAI (paket npm '@xai-official/grok' versi 0.2.93) mengemas direktori kerja saat ini menjadi 'before_codebase.tar.gz' dan 'after_codebase.tar.gz' sebelum dan sesudah setiap putaran tugas, dan diam-diam mengunggahnya ke repositori Google Cloud xAI melalui saluran bypass terpisah. Verifikasi menunjukkan bahwa meskipun model membalas hanya dengan satu kata, upload tetap terjadi. Paket unggahan juga berisi '~/.claude.json' di luar repositori, pengaturan Claude Code, aturan AGENTS global, lebih dari 30 file Skill, dan kunci API. Pada dini hari tanggal 13 Juli, xAI menambahkan bidang 'disable_codebase_upload' melalui sakelar server jarak jauh, mematikan perilaku unggahan default, tetapi sebelumnya fitur ini diaktifkan secara default.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"Grok CLI resmi xAI dilaporkan diam-diam mengunggah seluruh basis kode dan kunci pengguna - Berita AI Aioga","description":"Peneliti keamanan telah menemukan bahwa Grok CLI resmi xAI (paket npm '@xai-official/grok' versi 0.2.93) mengemas direktori kerja saat ini menjadi 'before_codebase.tar.gz' dan 'aft","url":"https://www.aioga.com/id/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:03.832Z"},"th":{"title":"มีรายงานว่า Grok CLI อย่างเป็นทางการของ xAI ได้อัปโหลดโค้ดเบสและคีย์ผู้ใช้ทั้งหมดอย่างเงียบๆ","summary":"นักวิจัยด้านความปลอดภัยพบว่า Grok CLI อย่างเป็นทางการของ xAI (แพ็คเกจ npm '@xai-official/grok' เวอร์ชัน 0.2.93) บรรจุไดเร็กทอรีงานปัจจุบันเป็น 'before_codebase.tar.gz' และ 'after_codebase.tar.gz' ก่อนและหลังงานแต่ละรอบ และอัปโหลดไปยังที่เก็บ Google Cloud ของ xAI อย่างเงียบ ๆ ผ่านช่องทางบายพาสแยกต่างหาก การตรวจสอบแสดงให้เห็นว่าแม้ว่านางแบบจะตอบกลับด้วยคําเดียว แต่การอัปโหลดก็ยังคงเกิดขึ้น แพ็คเกจการอัปโหลดยังมี '~/.claude.json' นอกที่เก็บ, การตั้งค่า Claude Code, กฎ AGENTS ส่วนกลาง, ไฟล์ทักษะมากกว่า 30 ไฟล์ และคีย์ API ในช่วงเช้าตรู่ของวันที่ 13 กรกฎาคม xAI ได้เพิ่มฟิลด์ 'disable_codebase_upload' ผ่านสวิตช์เซิร์ฟเวอร์ระยะไกล โดยปิดพฤติกรรมการอัปโหลดเริ่มต้น แต่ก่อนหน้านี้คุณลักษณะนี้ถูกเปิดใช้งานโดยค่าเริ่มต้น","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"มีรายงานว่า Grok CLI อย่างเป็นทางการของ xAI ได้อัปโหลดโค้ดเบสและคีย์ผู้ใช้ทั้งหมดอย่างเงียบๆ - ข่าว AI Aioga","description":"นักวิจัยด้านความปลอดภัยพบว่า Grok CLI อย่างเป็นทางการของ xAI (แพ็คเกจ npm '@xai-official/grok' เวอร์ชัน 0.2.93) บรรจุไดเร็กทอรีงานปัจจุบันเป็น 'before_codebase.tar.gz' และ 'after_c","url":"https://www.aioga.com/th/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:04.185Z"},"pl":{"title":"Oficjalny Grok CLI xAI miał po cichu przesłać cały kod i klucze użytkownika","summary":"Badacze bezpieczeństwa odkryli, że oficjalny Grok CLI xAI (npm package '@xai-official/grok' wersja 0.2.93) pakuje aktualny katalog roboczy na 'before_codebase.tar.gz' i 'after_codebase.tar.gz' przed i po każdej rundzie zadań, a następnie po cichu przesyła je do repozytorium Google Cloud xAI przez osobny kanał omijania. Weryfikacja pokazuje, że nawet jeśli model odpowie jednym słowem, przesłanie nadal następuje. Pakiet przesyłania zawiera również '~/.claude.json' poza repozytorium, ustawienia kodu Claude'a, globalne reguły AGENTS, ponad 30 plików Skill oraz klucz API. We wczesnych godzinach 13 lipca xAI dodało pole 'disable_codebase_upload' za pomocą zdalnego przełącznika serwera, wyłączając domyślne zachowanie przesyłania, ale wcześniej funkcja ta była domyślnie włączona.","category":"行业动态","source":"公众号：数字生命卡兹克","pageTitle":"Oficjalny Grok CLI xAI miał po cichu przesłać cały kod i klucze użytkownika - Aioga Wiadomości AI","description":"Badacze bezpieczeństwa odkryli, że oficjalny Grok CLI xAI (npm package '@xai-official/grok' wersja 0.2.93) pakuje aktualny katalog roboczy na 'before_codebase.tar.gz' i 'after_code","url":"https://www.aioga.com/pl/news/cmriguktg00arbijpt0l7c2vh/","contentTranslated":true,"sourceHash":"112406d0d4bc0652","translatedAt":"2026-07-19T11:51:04.918Z"}}}}